Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-86788MEDIUMHT Mega 3.2.0 - 3.2.5 - Contributor+ Stored XSS via Section Headline TagEPSS 0.4%CVE-2026-84931MEDIUMJoli Table Of Contents < 3.0.3 - Author+ Stored XSS via joli-toc Shortcode Theme AttributeEPSS 0.4%CVE-2026-83545MEDIUMCoolClock < 4.3.8 - Contributor+ Stored XSS via Custom Skin JSONEPSS 0.4%CVE-2026-10077MEDIUMYOOtheme Pro < 5.0.35 - Author+ Stored XSS via UIkit Data AttributesEPSS 0.4%CVE-2026-14318MEDIUMGiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template SettingsEPSS 0.4%CVE-2026-76558MEDIUMWP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field NamesEPSS 0.4%CVE-2026-84028MEDIUMBold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settingsEPSS 0.4%CVE-2026-19697MEDIUMGutenKit < 2.5.0 - Author+ Stored XSS via SVG UploadEPSS 0.4%CVE-2022-2123—WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2026-91011MEDIUMEWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference ExpansionEPSS 0.4%CVE-2026-83547MEDIUMXpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple WidgetsEPSS 0.4%CVE-2026-5336MEDIUMDataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information DisclosureEPSS 0.4%CVE-2026-14833MEDIUMLightbox with PhotoSwipe < 5.9.0 - Author+ Stored XSS via data-lbwps-caption AttributeEPSS 0.4%CVE-2026-86784MEDIUMVisualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data SourceEPSS 0.4%CVE-2026-86790MEDIUMWP Highlight Box <= 1.0 - Contributor+ Stored XSS via highlight-box ShortcodeEPSS 0.4%CVE-2024-3048MEDIUMBannerlid <= 1.1.0 - Reflected XSSEPSS 0.4%CVE-2024-4305MEDIUMPostX < 4.1.0 - Contributor+ Stored XSSEPSS 0.4%CVE-2025-15433MEDIUMShared Files < 1.7.58 - Contributor+ Arbitrary File DownloadEPSS 0.4%CVE-2026-8163HIGHInfility Global < 2.15.19 - Subscriber+ SQL Injection via order ParameterEPSS 0.4%CVE-2023-6005MEDIUMEventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site ScriptingEPSS 0.4%